CVE-2017-11089: Google Android

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

In android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, a buffer overread is observed in nl80211_set_station when user space application sends attribute NL80211_ATTR_LOCAL_MESH_POWER_MODE with data of size less than 4 bytes

Affected products

• Google Android: affected versions not specified

Published 2017-11-16. Last modified 2026-06-17.